Re: [mailop] Yahoo failing to comply with their own SPF records

The Sender domain and SPF record involved was under the following: response.email.cc.yahoo.com ... Which appears to be zetaglobal, true. Thanks, Mark. On 6 June 2025 12:56:34 am NZST, Bill Cole via mailop wrote: >On 2025-06-05 at 02:50:17 UTC-0400 (Thu, 5 Jun 2025 18:50:17 +1200) >Mark

[mailop] Yahoo failing to comply with their own SPF records

Anyone from Yahoo out there? My mail platform refused an email from Yahoo today (an account notification sent to an alternate contact address linked to a yahoo.com account) because the IP address doing the SMTP delivery was outside the SPF record (an adjacent subnet) i.e. there's an error in t

Re: [mailop] Let's play "What's wrong with this picture?" - perhaps Microsoft can take the first stab at this :)

I had to reach out to their technical support (for the outlook.com / hotmail.com stuff) recently when email from my personal MTA disappeared into a black hole for ~9 hours. After about hour 1 or 2 I raised a support request (as a customer) and over the course of an hour (online chat session) i

Re: [mailop] ab...@microsoft.com => Mailbox full

Per https://msrc.microsoft.com/report/abuse it appears they would like you to fill in a web form, in order to "report suspected cyberattacks or abuse originating from Microsoft Online Services, such as Microsoft Azure, Bing, OneDrive, and Office 365." It does cite ab...@microsoft.com as a vali

Re: [mailop] OpenDMARC

Some reading that might be useful. https://github.com/vshymanskyy/StandWithUkraine/issues/135 https://www.theregister.com/2022/06/27/7zip_compression_tool/ https://pcper.com/2022/06/boycott-7-zip-because-its-not-on-github-seriously/ My impression is that 7-Zip is way, way down the severity lis

Re: [mailop] The oligopoly has won.

On 14/09/2022 9:24 pm, Renaud Allard via mailop wrote: On 9/14/22 10:57, Alessandro Vesely via mailop wrote: * Stop blackholing. That one is the absolute worst of the worst of the worst. Blackholing is something that _MUST NOT_ be done, ever, for whatever reason. There is never and h

Re: [mailop] Google's Request to the FEC about Allowing Political Email to Bypass Spam Filtering

On 10/07/2022 9:54 am, Jaroslaw Rafa via mailop wrote: Dnia 9.07.2022 o godz. 13:53:46 Anne Mitchell via mailop pisze: To those of you who aren't already aware of it, Google has asked the Federal Election Commission for an opinion about Google's 'pilot project' to allow political candidates an

Re: [mailop] Question for Google -- how am I able to be added to google groups without opting in?

On 17/06/2022 3:46 pm, Noel Butler via mailop wrote: On 17/06/2022 05:55, Brandon Long via mailop wrote: You should get a welcome message when a user direct subscribes you to a group that should have an unsubscribe link in it.  The welcome message part of the flow that the group manager can

Re: [mailop] Roundcube client IPs → dovecot, postfix

On 29/12/2021 11:58 pm, Noel Butler via mailop wrote: On 29/12/2021 14:15, Mark Foster via mailop wrote: I use Roundcube myself and as a /user/ of the software, it hadn't occurred to me that, much like Gmail, people who send emails using this webmail tool have /full anonymity/ (excep

Re: [mailop] Roundcube client IPs → dovecot, postfix

On 29/12/2021 11:48 pm, Noel Butler via mailop wrote: abuse reports filed with them... there's little evidence of this to an end-user/victim...) I for one look forward to Roundcube building in the option to have the web IP included in headers, Mark, you do realise, that information *is alre

Re: [mailop] Roundcube client IPs → dovecot, postfix

On 29/12/2021 1:35 pm, Noel Butler via mailop wrote: On 29/12/2021 03:50, Jaroslaw Rafa via mailop wrote: It is Roundcube that is actually connecting to Dovecot/Postfix and receiving/sending mail, not the user's browser, so the connecting IP that Dovecot/Postfix gets is technically correct.

Re: [mailop] DMARC and pure SPF

Merging responses to two thread followups below: On 6/10/2021 11:54 am, Neil Jenkins via mailop wrote: On Wed, 6 Oct 2021, at 08:42, Mark Foster via mailop wrote: I think people using forwarding _know_ that SPF breaks their stuff. That is a very optimistic viewpoint about the baseline

Re: [mailop] DMARC and pure SPF

On 6/10/2021 8:08 am, Slavko via mailop wrote: Hi, Dňa 4 Oct 2021 23:06:53 -0400 John Levine via mailop napísal: I think you will find that rejecting on SPF -all (other than the special case of a bare -all meaning we send no mail) will make you reject a lot of perfectly good mail. So don't

Re: [mailop] Outlook strange behavior from Outlook.com (not a surprise... but...)

Hi Xavier, If your secondary MX will refuse email with a relaying error, it's not a valid MX and should be removed from DNS... This doesn't explain outlook.com favouring it but also, they've pulled you up on poor configuration. :-) No point in having an advertised MX that isn't ready for ac

Re: [mailop] Maximum message size - tag along question.

My usual limit is 100MB and then I explain to my users that: 1) That's the _email size limit_ and not the size limit for an attachment to an email 2) Email is inefficient when used for transferring files, thus overhead 3) Email is not intended to be a system for routinely moving large files 4) Yo

Re: [mailop] STARTTLS - Constant Contact and yahoo.co.jp

I think the option of forcing TLS within a closed community is fine. I think the option of forcing TLS on the wide-wide-internet is a minefield for anyone who needs to communicate outside of a relatively closed network... because Email supports fall-back-to-plain-text by design, and it's hard to

Re: [mailop] Microsoft Outlook "Modern Authentication"?

> On 2020-05-28 at 13:35 -0600, Daniele Nicolodi via mailop wrote: >> Does anyone know if there is any alternative to Outlook to access >> Exchange Online mailboxes that require modern authentication? >> >> The IT department of the organization that is pushing thins says that >> modern authenticati

Re: [mailop] Unable to receive email from WeTransfer and Facebook (only for a specific domain)

Works fine if you don't include the final period: mail from: <> 250 ok rcpt to: 250 ok quit 221 mail04.cbsolt.net So that's not it. -Original Message- From: mailop On Behalf Of ml+mailop--- via mailop Sent: Sunday, 17 May 2020 10:31 pm To: mailop@mailop.org Subject: Re: [mailop] Unabl

Re: [mailop] How long to retry?

> > > On 3 Feb 2020, at 14:04, Brandon Long via mailop wrote: > >> One of the main reasons I don't think we should use such long retries >> is >> that it violates user expectations. Users often treat email as nearly >> instantaneous, because it normally is... so taking hours or days of >> actually

Re: [mailop] [EXTERNAL] Re: [FEEDBACK] whose address, was Approach to dealing with List Washing services, industry feedback..

On 26/01/2020 1:46 PM, Ángel via mailop wrote: On 2020-01-24 at 11:16 -0800, Brandon Long via mailop wrote: Anyways, the main reason I assume is design and space limitations as well as the cognitive load of the UI. Only showing it when it may be important increases the chance that it's noticed

Re: [mailop] [FEEDBACK] whose address, was Approach to dealing with List Washing services, industry feedback..

> Dnia 22.01.2020 o godz. 23:31:13 John Levine via mailop pisze: >> At some point I give up and hit the spam button. > > And thus you are training Google's AI to treat completely legit (only > misdirected) messages as spam. > Maybe one day these senders will find out that when they send another > m

Re: [mailop] [FEEDBACK] Approach to dealing with List Washing services, industry feedback..

Mark. -Original Message- From: Jaroslaw Rafa Sent: Friday, 17 January 2020 9:47 pm To: M. Omer GOLGELI Cc: Mark Foster ; Brandon Long ; mailop ; Jay Hennigan Subject: Re: [mailop] [FEEDBACK] Approach to dealing with List Washing services, industry feedback.. Dnia 17.01.2020 o godz.

Re: [mailop] [FEEDBACK] Approach to dealing with List Washing services, industry feedback..

. If you run a service that doesn’t have effective double-opt-in, (or even a ‘click this if it wasn’t you!’ early in the process), this is the risk you run, right? Mark. From: Brandon Long Sent: Friday, 17 January 2020 5:28 pm To: Mark Foster Cc: Jay Hennigan ; mailop Subject: Re

Re: [mailop] [FEEDBACK] Approach to dealing with List Washing services, industry feedback..

I couldn't help but respond to this one... > I'd say if it's even remotely gray mail, and not pure spam, go for the > unsubscribe. On Gmail, we only provide a ui unsub link if the sender > reputation is ok, for example, but arguably anything from a mainstream esp > or company is fine to unsub fro

Re: [mailop] Return Path / Sender Score

Michael, I had a grump at Kogan / Dick Smith via email when I wound up on what I assume is the same distribution list. Speaking very firmly with them via Twitter initially, and then ultimately via email with someone at Kogan, the spam seems to have stopped. They alleged that someone submitted

Re: [mailop] SpamCop and listwashing

Aside: Clicking Reply-All in Microsoft Outlook only put Luis and Andy into the To: box. I had to manually add mailop. My view is that (generally), Operations that're so big as to receive many reports a day, grossly under-resource their abuse-response capability and don't particularly care about

Re: [mailop] About to blacklist Marketo - has anyone received non-spam from them?

> > So ... never, ever post one's email, "Online" ... > Does this include to an industry mailinglist, I wonder ... if membership > is unvetted? > Obviously this is only relevant to my jurisdiction (New Zealand) but when we created the Unsolicited Electronic Messaging Act we created different defi

Re: [mailop] Howto be a good mailop (best practice / insights wanted)

> Hi Ken, > > > > awesome. Thats a bunch of helpful steps! Thanks a lot! > I'm a few years removed from directly administering a 'real' mail server (directly, at least) but I have some observations about Ken's list: > > * Monitor abuse@ and make sure that this address a) exists for your > clien

Re: [mailop] Anyone from Mandrill/Mailchimp here?

> I realized I sent this to Paul, but forgot to CC the list. So I’m > sending this again. > *snip* > Unfortunately, some mail is still able to slip through the net. We are > also unable to identify these compromised accounts before the malicious > mail is sent, because the Mandrill account cred

Re: [mailop] Strato Postmaster around? relay.rzone.de does not offer STARTTLS

Technically, that’s not right.. There’s no technical reason why a backup MX should be required to offer STARTTLS just because the primary does. That being said, support for STARTTLS should be pretty much universal these days, so asking the question is fair. Just not with the angle of it being

Re: [mailop] SPF soft fail vs. hard fail

I know SPF generates some polarizing views, but my view is this: - if you can trust that legit mail will have a 100% pass rate for legit email, use a hardfail and those operators who evaluate it and use it will see benefit. Win. - if you can't trust that pass rate, publish a soft fail and let ot

Re: [mailop] *Grumble* When is Amazon AWS going to properly inject trace headers..

All of this, but also the only header you can trust is the one added by your own mail server. So the IP address you logged as delivering the email to YOU is the only one that is for all intents-and-purposes, 'real'. Additional information is nice, true, but it's also unverifiable, especially if yo

Re: [mailop] SpamCannibal RBL

Doesn't ICANN policy require the domain to be put into a pending state and disabled in the DNS for a period of time before it's allowed to be resold? Here it is, grace period: https://www.icann.org/resources/pages/expired-2013-05-03-en Failure to work in the DNS is often the trigger for the owne

Re: [mailop] supp...@gmail.com doesn't accept email.

I'm not sure what you're reporting here. Is it supposed to work? I found no reference to it on any official Google support websites when I searched for it. Did you just assume it'd work? Is there some presumption that it should work by convention? I've never seen this stipulated. Perhaps st

Re: [mailop] outlook.com and greylisting

Good tips. I'm running postfix/postgrey. The combination of rolling source IP's and long periods between retries seems to be the killer here. I also have quite a bit (but not all) of the email that passes through this server channeled via an antispam cloud service, this has probably shielded m

[mailop] outlook.com and greylisting

Hi All, I run a personal MTA but I host a few not-for-profits and such. Recently one of my users reported substantial delays on inbound emails, so I had a quick look... it turns out email from outlook.com was being seriously hindered by Greylisting. The retry rate on a 4xx error seems to be ver

[mailop] (New) Mailman mailing lists marked as spam by Gmail

As much as i'm sure this gets answered in a more conventional sense by other traffic on this list all the time, my problem particularly pertains to mailman driven mailing lists. I've moved my mailman installation onto a new VPS and it appears that mailing list subscribers who use Gmail are fin

Re: [mailop] Blocking emails from domains without SPF records

Perhaps i've missed something, but isn't the whole point of SPF that if a _sender domain_ publishes a -all SPF record, that any platform using SPF is _supposed to reject email that doesn't pass_ ? Forwarded email is going to cause an SPF failure, unless the envelope-sender is rewritten (ala ma

Re: [mailop] Null MX & Preference

On 15/07/2016 12:55 p.m., Suresh Ramasubramanian wrote: On 15/07/16, 4:19 AM, "mailop on behalf of Brian Godiksen" wrote: That is what I was thinking. I wasn’t sure if there is a specific reason the preference is called out in the RFC. 0 is the lowest preference MX and will therefore

Re: [mailop] Null MX & Preference

Surely if the MX record is declared as a . then the preference is irrelevant? On 15/07/2016 8:38 a.m., Brian Godiksen wrote: I noticed inconsistencies in how domains are publishing null MX records. In RFC7505 it states these records should be published with a preference number 0. I am seei

Re: [mailop] Microsoft/Hotmail discards mails

As a long time hotmail.com account holder, I can tell you that I would never request a silent-discard option. If you are able to determine via black-box algorithms that a message is sufficiently spammy, why not refuse after post-dot? I'm sure Hotmail deals with spam volumes that are orders of

Re: [mailop] Massive Spamrun from Cox Net: 68.230.241.0/24

a far more 'useful' response than pretty much anything available to 'foreign' network operators. Mark Foster Wellington, New Zealand On 1/06/2016 3:14 p.m., Suresh Ramasubramanian wrote: With multiple million legitimate users of one of the largest broadband providers in th

Re: [mailop] IBM SPF vs smtp.notes.na.collabserv.com

Surely deploying ~all is done in order for you to determine which edge cases won't pass, prior to considering a move to -all? If it isn't -all then whilst it can be used for scoring it cannot alone be the factor that determines accept-or-not. Beyond that if you choose to reject email from my ~

[mailop] OT: Recovering expired domain names with Network Solutions

I realise this is OT - it's the vaguely email related, however... Has anyone had any luck dealing with Network Solutions regarding expired domain names and their recovery? In particular they appear to be failing to adhere to the ICANN policy that requires them to suspend the domain in DNS durin

Re: [mailop] Ex-post-facto spam complaints, a possible UI problem / other mitigation

fic continues (after … 24 hours? Some demand at least a week to > unsub, and that’s obscene IMHO), the sender should be banned completely. > > Aloha, > Michael. > -- > Michael J Wise | Microsoft | Spam Analysis | "Your Spam Specimen Has Been > Processed." | G

Re: [mailop] Ex-post-facto spam complaints, a possible UI problem / other mitigation

One of my email addresses gets what look like legit mailing list emails constantly. I opted into none of them so they all get spam-reported despite valid unsub processes. If the "valid" list doesn't use double-opt-in and uses addresses harvested by other means, this is a hard ask. Also waiting

Re: [mailop] Delivery to A record if MX exists ?

On 17/06/2015 10:33 p.m., Ted Cooper wrote: On 17/06/15 18:16, Kurt Jaeger wrote: I had a case where lb1-smtp-cloud3.xs4all.net delivered to an A record where an MX existed. Exchange machines will also try this if all MX defer, but if they get a 4xx/5xx error they ignore it. It's quite annoyi

Re: [mailop] Managing reputation of a mailman list host

I've had exactly this problem; I host a mailman installation for several lists and the moderator prompts themselves are frequently bounced as spam, causing me to deal with those bounces... Unfortunately I think that anti-spam measures that trigger on email content - which Mailman will send, in

Re: [mailop] Help. Why are my emails being marked as spam by google?

vice to the one he is using. -- Mark. Sent from a mobile device. > On 18/03/2015, at 6:45, Franck Martin wrote: > > >> On Mar 17, 2015, at 1:27 AM, Mark Foster wrote: >> >> >> >>> On 17/03/2015 7:28 p.m., Franck Martin wrote: >>> >>

Re: [mailop] Help. Why are my emails being marked as spam by google?

On 17/03/2015 7:28 p.m., Franck Martin wrote: On Mar 16, 2015, at 9:17 PM, Steve Holdoway > wrote: On Tue, 2015-03-17 at 03:28 +, John Levine wrote: Are you saying your hosting provider gave your a /128 instead of a /64 ? Yes You need a better hosting